last executing test programs: 38.335423092s ago: executing program 0 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 38.237881552s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="000000000000000004ff7b2234b1", 0xe}], 0x1, 0x4, 0xff, 0x4) 37.995718846s ago: executing program 0 (id=812): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 37.7561939s ago: executing program 0 (id=815): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_winnt}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@fat=@errors_continue}, {@fat=@nfs_nostale_ro}, {@utf8}, {@fat=@nocase}, {@utf8}, {@fat=@discard}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000004d80)={0x2020}, 0x2020) 37.463187739s ago: executing program 0 (id=818): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 37.075885007s ago: executing program 0 (id=822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) 36.817880083s ago: executing program 32 (id=822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) 5.132376243s ago: executing program 4 (id=1143): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5.126909574s ago: executing program 4 (id=1144): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r0, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 5.023540474s ago: executing program 4 (id=1145): syz_emit_vhci(0x0, 0x0) 4.95832661s ago: executing program 4 (id=1146): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_winnt}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@fat=@errors_continue}, {@fat=@nfs_nostale_ro}, {@utf8}, {@fat=@nocase}, {@utf8}, {@fat=@discard}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000004d80)={0x2020}, 0x2020) 4.874163269s ago: executing program 4 (id=1148): socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 4.545524231s ago: executing program 4 (id=1154): syz_emit_vhci(0x0, 0x0) 4.521394374s ago: executing program 2 (id=1155): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r0, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 4.247154071s ago: executing program 33 (id=1154): syz_emit_vhci(0x0, 0x0) 4.241512451s ago: executing program 2 (id=1158): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 3.554773879s ago: executing program 1 (id=1161): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.554589819s ago: executing program 2 (id=1162): socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 2.619370301s ago: executing program 2 (id=1167): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) 2.53164567s ago: executing program 1 (id=1168): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.484322405s ago: executing program 2 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001"], 0x30}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x1, {0xa, 0x4e20, 0xb53, @mcast1, 0x7}}}, 0x80) 2.394610793s ago: executing program 1 (id=1170): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 1.882735634s ago: executing program 3 (id=1171): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r0, 0xae64, 0x0) 1.784465644s ago: executing program 3 (id=1172): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x0, 0x6a4, &(0x7f0000002380)="$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") 1.650526767s ago: executing program 3 (id=1173): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.593265503s ago: executing program 3 (id=1174): socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 1.405641622s ago: executing program 1 (id=1175): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000280)={0x9, 0x5, 0x104, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_CREATE2(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) 1.31229613s ago: executing program 1 (id=1176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0x1}, 0xff, 0xfe}, {0x2, 0x0, {0x2, 0x1, 0x4}, {0x0, 0x0, 0x2}, 0x2}, {0x3, 0x3, {0x2, 0xff}, {0x1, 0x0, 0x2}, 0x1, 0xff}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 654.079686ms ago: executing program 3 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x25, 0x55a8, &(0x7f00000014c0)="$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") rmdir(&(0x7f00000002c0)='./file0\x00') 79.180293ms ago: executing program 2 (id=1178): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {0x0}], 0x2}, 0x0) 54.693225ms ago: executing program 3 (id=1179): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r0, 0xae64, 0x0) 0s ago: executing program 1 (id=1180): socket$netlink(0x10, 0x3, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x14, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): eed) [ 114.424998][ T6410] vhci_hcd vhci_hcd.0: Device attached [ 114.470602][ T6411] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 114.481814][ T58] vhci_hcd: stop threads [ 114.486728][ T58] vhci_hcd: release socket [ 114.491375][ T58] vhci_hcd: disconnect device [ 114.552638][ T5937] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.668840][ T6415] loop1: detected capacity change from 0 to 64 [ 114.742830][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 114.753381][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.781200][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.800642][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.810233][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.828815][ T5937] usb 4-1: config 0 descriptor?? [ 114.879799][ T5937] hub 4-1:0.0: USB hub found [ 115.281152][ T5937] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 115.499470][ T6427] loop0: detected capacity change from 0 to 4096 [ 115.510421][ T6427] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 115.527610][ T5937] usbhid 4-1:0.0: can't add hid device: -71 [ 115.548793][ T5937] usbhid: probe of 4-1:0.0 failed with error -71 [ 115.593787][ T5937] usb 4-1: USB disconnect, device number 4 [ 115.751293][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 115.751308][ T28] audit: type=1326 audit(1761056828.879:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 115.826478][ T6436] loop2: detected capacity change from 0 to 64 [ 115.839375][ T28] audit: type=1326 audit(1761056828.919:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 115.892240][ T28] audit: type=1326 audit(1761056828.939:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 115.983405][ T28] audit: type=1326 audit(1761056828.939:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.042532][ T28] audit: type=1326 audit(1761056828.939:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.116374][ T28] audit: type=1326 audit(1761056828.939:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.198329][ T28] audit: type=1326 audit(1761056828.939:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.278678][ T28] audit: type=1326 audit(1761056828.939:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.332525][ T28] audit: type=1326 audit(1761056828.939:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.394068][ T28] audit: type=1326 audit(1761056828.949:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 116.821095][ T6456] loop3: detected capacity change from 0 to 4096 [ 116.863612][ T6456] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 117.172695][ T6464] loop0: detected capacity change from 0 to 64 [ 117.553174][ T5876] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.753137][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 117.764943][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.793163][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.812925][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.843629][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.882156][ T5876] usb 4-1: config 0 descriptor?? [ 117.914694][ T5876] hub 4-1:0.0: USB hub found [ 118.251932][ T6489] loop0: detected capacity change from 0 to 64 [ 118.325208][ T5876] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 118.550756][ T5876] usbhid 4-1:0.0: can't add hid device: -71 [ 118.572233][ T5876] usbhid: probe of 4-1:0.0 failed with error -71 [ 118.633926][ T5876] usb 4-1: USB disconnect, device number 5 [ 119.544065][ T6524] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 119.550700][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.572614][ T6524] vhci_hcd vhci_hcd.0: Device attached [ 119.671300][ T6525] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 119.681247][ T58] vhci_hcd: stop threads [ 119.706935][ T58] vhci_hcd: release socket [ 119.711451][ T58] vhci_hcd: disconnect device [ 119.862608][ T6536] loop3: detected capacity change from 0 to 256 [ 119.872224][ T6536] exfat: Deprecated parameter 'namecase' [ 119.911342][ T6536] exfat: Deprecated parameter 'namecase' [ 119.934810][ T6536] exfat: Deprecated parameter 'utf8' [ 120.000087][ T6536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 120.305565][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.512194][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 120.520855][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.548975][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.589742][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.624281][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.635349][ T23] usb 3-1: config 0 descriptor?? [ 120.646776][ T23] hub 3-1:0.0: USB hub found [ 120.851672][ T6566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 120.858372][ T6566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.880832][ T6566] vhci_hcd vhci_hcd.0: Device attached [ 120.993897][ T6567] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 121.019904][ T48] vhci_hcd: stop threads [ 121.025543][ T48] vhci_hcd: release socket [ 121.030606][ T48] vhci_hcd: disconnect device [ 121.068293][ T23] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 121.178160][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 121.178176][ T28] audit: type=1326 audit(1761056834.309:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.219399][ T28] audit: type=1326 audit(1761056834.349:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.277355][ T28] audit: type=1326 audit(1761056834.349:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.310805][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 121.321968][ T6581] loop0: detected capacity change from 0 to 256 [ 121.333818][ T6581] exfat: Deprecated parameter 'namecase' [ 121.342589][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 121.347855][ T28] audit: type=1326 audit(1761056834.349:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.393529][ T23] usb 3-1: USB disconnect, device number 4 [ 121.399481][ T6581] exfat: Deprecated parameter 'namecase' [ 121.425417][ T6581] exfat: Deprecated parameter 'utf8' [ 121.431006][ T28] audit: type=1326 audit(1761056834.349:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.465695][ T28] audit: type=1326 audit(1761056834.379:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.496521][ T28] audit: type=1326 audit(1761056834.379:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.524377][ T6581] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 121.543066][ T28] audit: type=1326 audit(1761056834.379:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.574361][ T28] audit: type=1326 audit(1761056834.379:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.623674][ T28] audit: type=1326 audit(1761056834.379:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 121.709055][ T6587] loop3: detected capacity change from 0 to 64 [ 122.241220][ T6602] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 122.247834][ T6602] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.270306][ T6602] vhci_hcd vhci_hcd.0: Device attached [ 122.320932][ T6603] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 122.347453][ T1305] vhci_hcd: stop threads [ 122.351775][ T1305] vhci_hcd: release socket [ 122.377408][ T1305] vhci_hcd: disconnect device [ 122.401006][ T6611] loop3: detected capacity change from 0 to 64 [ 122.439855][ T6613] loop0: detected capacity change from 0 to 256 [ 122.448458][ T6613] exfat: Deprecated parameter 'namecase' [ 122.502723][ T6613] exfat: Deprecated parameter 'namecase' [ 122.533397][ T6613] exfat: Deprecated parameter 'utf8' [ 122.578872][ T6613] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 122.797224][ T6619] binder: 6618:6619 ioctl c0306201 200000000680 returned -14 [ 122.816245][ T6621] fuse: Unknown parameter '00000000000000000003' [ 122.825468][ T6621] loop1: detected capacity change from 0 to 16 [ 122.886760][ T6621] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.922611][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.106853][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 123.112603][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 123.126948][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.138693][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.149324][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.158539][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.171865][ T23] usb 4-1: config 0 descriptor?? [ 123.188797][ T23] hub 4-1:0.0: USB hub found [ 123.204070][ T5922] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 123.319413][ T6632] loop2: detected capacity change from 0 to 8192 [ 123.407514][ T5922] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.428665][ T5922] usb 1-1: config 0 has no interface number 0 [ 123.435539][ T5922] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 123.452523][ T5922] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 123.469593][ T5922] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.478929][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.490652][ T5922] usb 1-1: config 0 descriptor?? [ 123.498728][ T6623] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.535819][ T5922] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 123.559143][ T6635] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 123.594865][ T23] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 123.620496][ T6635] team0: Port device netdevsim0 added [ 123.826905][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 123.833527][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 123.875774][ T23] usb 4-1: USB disconnect, device number 6 [ 124.502312][ T6644] binder: 6643:6644 ioctl c0306201 200000000680 returned -14 [ 124.646207][ T6646] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 124.652992][ T6646] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.667593][ T6646] vhci_hcd vhci_hcd.0: Device attached [ 124.678963][ T6650] fuse: Unknown parameter '00000000000000000003' [ 124.692212][ T6650] loop0: detected capacity change from 0 to 16 [ 124.710529][ T6650] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.845892][ T6647] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 124.883696][ T1305] vhci_hcd: stop threads [ 124.888039][ T1305] vhci_hcd: release socket [ 124.931737][ T1305] vhci_hcd: disconnect device [ 124.992607][ T5937] usb 40-1: enqueue for inactive port 0 [ 125.262764][ T6661] loop0: detected capacity change from 0 to 64 [ 125.514305][ T5937] usb usb40-port1: attempt power cycle [ 125.580433][ T5922] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.594712][ T6670] fuse: Unknown parameter '00000000000000000003' [ 125.608292][ T6669] binder: 6667:6669 ioctl c0306201 200000000680 returned -14 [ 125.614576][ T6670] loop3: detected capacity change from 0 to 16 [ 125.644868][ T6670] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.792838][ T5923] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 125.812887][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 125.830465][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.848872][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.867513][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.877429][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.893410][ T5922] usb 3-1: config 0 descriptor?? [ 125.904174][ T5922] hub 3-1:0.0: USB hub found [ 125.927487][ T6675] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 125.989310][ T6675] team0: Port device netdevsim0 added [ 125.997764][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.009936][ T5923] usb 2-1: config 0 has no interface number 0 [ 126.023043][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 126.035865][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 126.059819][ T5923] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.079368][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.135648][ T5923] usb 2-1: config 0 descriptor?? [ 126.142783][ T6666] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 126.153391][ T5922] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 126.170048][ T5923] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 126.174264][ T5937] usb usb40-port1: unable to enumerate USB device [ 126.301274][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 126.301290][ T28] audit: type=1326 audit(1761056839.429:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.346046][ T28] audit: type=1326 audit(1761056839.439:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.378281][ T28] audit: type=1326 audit(1761056839.469:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.426579][ T28] audit: type=1326 audit(1761056839.469:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.486612][ T28] audit: type=1326 audit(1761056839.469:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.524697][ T6685] loop0: detected capacity change from 0 to 64 [ 126.535737][ T28] audit: type=1326 audit(1761056839.479:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.583921][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 126.590371][ T5922] usbhid: probe of 3-1:0.0 failed with error -71 [ 126.615776][ T28] audit: type=1326 audit(1761056839.489:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.660511][ T28] audit: type=1326 audit(1761056839.489:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.694167][ T28] audit: type=1326 audit(1761056839.489:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.694182][ T5922] usb 3-1: USB disconnect, device number 5 [ 126.729027][ T28] audit: type=1326 audit(1761056839.489:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 126.911023][ T6690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 126.917626][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 126.926767][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 126.970773][ T6691] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 126.979318][ T1116] vhci_hcd: stop threads [ 126.984632][ T1116] vhci_hcd: release socket [ 126.989274][ T1116] vhci_hcd: disconnect device [ 127.208828][ T6695] binder: 6694:6695 ioctl 4018620d 0 returned -22 [ 127.216707][ T6695] binder: 6694:6695 ioctl c0306201 200000000680 returned -14 [ 127.380852][ T6698] fuse: Unknown parameter '00000000000000000003' [ 127.414359][ T6698] loop3: detected capacity change from 0 to 16 [ 127.458858][ T6698] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.739581][ T6707] loop0: detected capacity change from 0 to 64 [ 128.095622][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.108623][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.148644][ T6718] binder: 6717:6718 ioctl 4018620d 0 returned -22 [ 128.157201][ T6718] binder: 6717:6718 ioctl c0306201 200000000680 returned -14 [ 128.386354][ T6725] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 128.431053][ T6724] loop0: detected capacity change from 0 to 8192 [ 128.532670][ T5876] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 128.624592][ T6727] fuse: Unknown parameter 'fd00000000000000000003' [ 128.650174][ T6727] loop0: detected capacity change from 0 to 16 [ 128.662993][ T6727] erofs: (device loop0): mounted with root inode @ nid 36. [ 128.733868][ T5876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.741954][ T5876] usb 4-1: config 0 has no interface number 0 [ 128.780845][ T5876] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 128.801986][ T5876] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 128.830401][ T6729] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 128.837270][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 128.841786][ T5876] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.870612][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.877491][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 128.900126][ T5876] usb 4-1: config 0 descriptor?? [ 128.918289][ T6720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.958172][ T5876] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 129.010143][ T6730] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 129.023066][ T3462] vhci_hcd: stop threads [ 129.027399][ T3462] vhci_hcd: release socket [ 129.031874][ T3462] vhci_hcd: disconnect device [ 129.222521][ T6741] loop0: detected capacity change from 0 to 64 [ 129.775380][ T6754] binder: 6753:6754 ioctl 4018620d 0 returned -22 [ 129.794110][ T6754] binder: 6753:6754 ioctl c0306201 200000000680 returned -14 [ 129.864862][ T6758] fuse: Unknown parameter 'fd00000000000000000003' [ 129.898349][ T6758] loop0: detected capacity change from 0 to 16 [ 129.916164][ T6758] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.103242][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.201830][ T6767] loop0: detected capacity change from 0 to 64 [ 130.313567][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 130.338647][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.385819][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.422879][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.452515][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.484122][ T6771] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 130.490898][ T6771] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 130.508630][ T6771] vhci_hcd vhci_hcd.0: Device attached [ 130.532668][ T9] usb 3-1: config 0 descriptor?? [ 130.552185][ T9] hub 3-1:0.0: USB hub found [ 130.660803][ T6772] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 130.691384][ T3462] vhci_hcd: stop threads [ 130.712607][ T3462] vhci_hcd: release socket [ 130.730897][ T3462] vhci_hcd: disconnect device [ 130.771377][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 130.942889][ T6784] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 130.979128][ T6786] binder: 6785:6786 ioctl c0306201 0 returned -14 [ 130.987331][ T6786] binder: 6785:6786 ioctl c0306201 200000000680 returned -14 [ 131.082268][ T6788] fuse: Unknown parameter 'fd00000000000000000003' [ 131.093889][ T6788] loop3: detected capacity change from 0 to 16 [ 131.112010][ T6788] erofs: (device loop3): mounted with root inode @ nid 36. [ 131.192755][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 131.198938][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.274170][ T9] usb 3-1: USB disconnect, device number 6 [ 131.318436][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.331764][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.860192][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 131.860208][ T28] audit: type=1326 audit(1761056844.989:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 131.899210][ T28] audit: type=1326 audit(1761056844.989:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 131.930594][ T28] audit: type=1326 audit(1761056844.999:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 131.981791][ T28] audit: type=1326 audit(1761056844.999:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.018608][ T28] audit: type=1326 audit(1761056844.999:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.096698][ T28] audit: type=1326 audit(1761056844.999:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.171371][ T28] audit: type=1326 audit(1761056844.999:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.205868][ T28] audit: type=1326 audit(1761056844.999:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.235007][ T28] audit: type=1326 audit(1761056844.999:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.251982][ T6810] binder: 6809:6810 ioctl c0306201 0 returned -14 [ 132.303977][ T6810] binder: 6809:6810 ioctl c0306201 200000000680 returned -14 [ 132.349953][ T28] audit: type=1326 audit(1761056844.999:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 132.492000][ T6814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 132.498615][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 132.534824][ T6814] vhci_hcd vhci_hcd.0: Device attached [ 132.549088][ T6819] loop2: detected capacity change from 0 to 16 [ 132.649858][ T6819] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.768686][ T6815] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 132.797353][ T3462] vhci_hcd: stop threads [ 132.802227][ T3462] vhci_hcd: release socket [ 132.813484][ T3462] vhci_hcd: disconnect device [ 132.842653][ T5937] usb 34-1: enqueue for inactive port 0 [ 133.248780][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.255985][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.322646][ T5923] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.343546][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.355337][ T6842] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 133.361259][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.372822][ T5937] usb usb34-port1: attempt power cycle [ 133.512591][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 133.521860][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.534220][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.541483][ T6847] binder: 6846:6847 ioctl c0306201 0 returned -14 [ 133.545294][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.557998][ T6847] binder: 6846:6847 ioctl c0306201 200000000680 returned -14 [ 133.561071][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.589428][ T5923] usb 3-1: config 0 descriptor?? [ 133.620606][ T5923] hub 3-1:0.0: USB hub found [ 133.820617][ T5923] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 133.834847][ T6852] loop0: detected capacity change from 0 to 16 [ 133.862130][ T6852] erofs: (device loop0): mounted with root inode @ nid 36. [ 134.033755][ T5937] usb usb34-port1: unable to enumerate USB device [ 134.239178][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 134.248466][ T5923] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.284886][ T5923] usb 3-1: USB disconnect, device number 7 [ 134.487771][ T6865] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 134.494395][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 134.508844][ T6865] vhci_hcd vhci_hcd.0: Device attached [ 134.566201][ T6866] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 134.576867][ T1116] vhci_hcd: stop threads [ 134.581191][ T1116] vhci_hcd: release socket [ 134.588992][ T1116] vhci_hcd: disconnect device [ 134.759638][ T6872] binder: 6871:6872 ioctl c0306201 200000000680 returned -14 [ 135.006169][ T6881] loop2: detected capacity change from 0 to 16 [ 135.022589][ T6881] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.179671][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.189321][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.618815][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.627963][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.642198][ T6899] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 135.752270][ T6901] binder: 6900:6901 ioctl c0306201 200000000680 returned -14 [ 136.126592][ T6910] loop2: detected capacity change from 0 to 16 [ 136.139849][ T6910] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.356340][ T6913] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.362952][ T6913] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.373253][ T6913] vhci_hcd vhci_hcd.0: Device attached [ 136.469984][ T6915] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 136.495755][ T1305] vhci_hcd: stop threads [ 136.505270][ T1305] vhci_hcd: release socket [ 136.510143][ T1305] vhci_hcd: disconnect device [ 136.768804][ T6925] binder: 6924:6925 ioctl c0306201 200000000680 returned -14 [ 136.914277][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 136.914292][ T28] audit: type=1326 audit(1761056850.049:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 136.959418][ T28] audit: type=1326 audit(1761056850.079:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 136.982782][ T28] audit: type=1326 audit(1761056850.079:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.007739][ T28] audit: type=1326 audit(1761056850.079:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.062575][ T28] audit: type=1326 audit(1761056850.079:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.104678][ T28] audit: type=1326 audit(1761056850.079:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.136173][ T28] audit: type=1326 audit(1761056850.079:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.159992][ T28] audit: type=1326 audit(1761056850.079:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.210584][ T28] audit: type=1326 audit(1761056850.079:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.233278][ T28] audit: type=1326 audit(1761056850.079:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 137.324214][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.336064][ T6936] loop3: detected capacity change from 0 to 16 [ 137.349580][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.365324][ T6936] erofs: (device loop3): mounted with root inode @ nid 36. [ 137.621203][ T6941] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 137.920197][ T6945] binder: 6944:6945 ioctl c0306201 200000000680 returned -14 [ 138.372055][ T6957] loop2: detected capacity change from 0 to 16 [ 138.447686][ T6957] erofs: (device loop2): mounted with root inode @ nid 36. [ 138.500372][ T6961] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 138.507079][ T6961] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 138.592618][ T6961] vhci_hcd vhci_hcd.0: Device attached [ 138.796471][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.825263][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.839769][ T6962] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 138.861561][ T34] vhci_hcd: stop threads [ 138.867661][ T34] vhci_hcd: release socket [ 138.892796][ T34] vhci_hcd: disconnect device [ 138.912857][ T5937] usb 34-1: enqueue for inactive port 0 [ 138.920292][ T6971] binder: 6970:6971 ioctl c0306201 200000000680 returned -14 [ 139.355026][ T5876] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 139.453787][ T5937] usb usb34-port1: attempt power cycle [ 139.533753][ T6986] netlink: 'syz.3.427': attribute type 10 has an invalid length. [ 139.549404][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.554701][ T6987] loop1: detected capacity change from 0 to 16 [ 139.557882][ T5876] usb 3-1: config 0 has no interface number 0 [ 139.580779][ T5876] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.584108][ T6987] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.615842][ T5876] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 139.632149][ T5876] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.644975][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.660419][ T5876] usb 3-1: config 0 descriptor?? [ 139.672275][ T6976] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 139.686615][ T5876] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior3 [ 140.125108][ T5937] usb usb34-port1: unable to enumerate USB device [ 140.255033][ T6996] binder: BINDER_SET_CONTEXT_MGR already set [ 140.264970][ T6996] binder: 6995:6996 ioctl 4018620d 2000000002c0 returned -16 [ 140.274352][ T6996] binder: 6995:6996 ioctl c0306201 200000000680 returned -14 [ 140.697065][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.719703][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.771204][ T7008] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 140.777806][ T7008] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 140.787128][ T7008] vhci_hcd vhci_hcd.0: Device attached [ 140.904529][ T7009] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 140.912072][ T34] vhci_hcd: stop threads [ 140.919073][ T34] vhci_hcd: release socket [ 140.924132][ T34] vhci_hcd: disconnect device [ 141.174648][ T7018] binder: 7017:7018 ioctl c0306201 0 returned -14 [ 141.351242][ T7020] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 142.011938][ T7023] loop1: detected capacity change from 0 to 16 [ 142.025235][ T7023] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.115074][ T5876] usb 3-1: USB disconnect, device number 8 [ 142.217126][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 142.217142][ T28] audit: type=1326 audit(1761056855.339:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.312576][ T28] audit: type=1326 audit(1761056855.379:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.394299][ T28] audit: type=1326 audit(1761056855.389:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.455565][ T28] audit: type=1326 audit(1761056855.399:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.491653][ T28] audit: type=1326 audit(1761056855.399:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.559543][ T28] audit: type=1326 audit(1761056855.399:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.631368][ T28] audit: type=1326 audit(1761056855.399:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.661408][ T28] audit: type=1326 audit(1761056855.399:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.685346][ T28] audit: type=1326 audit(1761056855.399:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.710196][ T28] audit: type=1326 audit(1761056855.399:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcb0d8efc9 code=0x7ffc0000 [ 142.963483][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.998151][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.018874][ T7042] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 143.029657][ T7043] binder: 7041:7043 ioctl c0306201 0 returned -14 [ 143.344788][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.354328][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.757870][ T7053] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 143.764482][ T7053] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 143.772909][ T7053] vhci_hcd vhci_hcd.0: Device attached [ 143.877364][ T7054] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 143.887471][ T34] vhci_hcd: stop threads [ 143.896877][ T34] vhci_hcd: release socket [ 143.901921][ T34] vhci_hcd: disconnect device [ 144.070913][ T7064] loop2: detected capacity change from 0 to 16 [ 144.085972][ T7064] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.518326][ T7070] netlink: 'syz.1.461': attribute type 10 has an invalid length. [ 144.556874][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.567997][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.100960][ T7078] binder: 7077:7078 ioctl c0306201 0 returned -14 [ 145.397023][ T7086] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 145.403639][ T7086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 145.412763][ T7086] vhci_hcd vhci_hcd.0: Device attached [ 145.501579][ T7087] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 145.511050][ T1116] vhci_hcd: stop threads [ 145.520095][ T1116] vhci_hcd: release socket [ 145.531638][ T1116] vhci_hcd: disconnect device [ 145.702555][ T7093] loop1: detected capacity change from 0 to 16 [ 145.711269][ T7093] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.452614][ T5876] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.485455][ T7105] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 146.632604][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 146.640655][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.653979][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.672540][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.695686][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.733739][ T5876] usb 3-1: config 0 descriptor?? [ 146.749492][ T5876] hub 3-1:0.0: USB hub found [ 146.786150][ T7109] Zero length message leads to an empty skb [ 146.957526][ T5876] hub 3-1:0.0: 1 port detected [ 147.252134][ T7117] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 147.258737][ T7117] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 147.267279][ T7117] vhci_hcd vhci_hcd.0: Device attached [ 147.317180][ T7118] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 147.328441][ T48] vhci_hcd: stop threads [ 147.334197][ T48] vhci_hcd: release socket [ 147.338795][ T48] vhci_hcd: disconnect device [ 147.394433][ T5876] usb 3-1: USB disconnect, device number 9 [ 148.195340][ T7126] loop0: detected capacity change from 0 to 16 [ 148.225193][ T7126] erofs: (device loop0): mounted with root inode @ nid 36. [ 148.624786][ T7142] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 148.631393][ T7142] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.632530][ T7145] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 148.657163][ T7142] vhci_hcd vhci_hcd.0: Device attached [ 148.800981][ T7148] loop3: detected capacity change from 0 to 256 [ 148.811906][ T7148] exfat: Deprecated parameter 'namecase' [ 148.852631][ T7148] exfat: Deprecated parameter 'namecase' [ 148.879051][ T7148] exfat: Deprecated parameter 'utf8' [ 148.905858][ T7143] vhci_hcd: connection closed [ 148.906278][ T58] vhci_hcd: stop threads [ 148.916379][ T58] vhci_hcd: release socket [ 148.921127][ T58] vhci_hcd: disconnect device [ 148.947499][ T7148] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 148.962666][ T5937] usb 36-1: enqueue for inactive port 0 [ 149.250890][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.288450][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.306353][ T7152] binder: BINDER_SET_CONTEXT_MGR already set [ 149.332589][ T7152] binder: 7151:7152 ioctl 4018620d 2000000002c0 returned -16 [ 149.489582][ T5937] usb usb36-port1: attempt power cycle [ 150.145817][ T5937] usb usb36-port1: unable to enumerate USB device [ 150.304775][ T7171] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 150.311390][ T7171] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.330288][ T7175] loop3: detected capacity change from 0 to 256 [ 150.340969][ T7175] exfat: Deprecated parameter 'namecase' [ 150.348895][ T7169] loop2: detected capacity change from 0 to 16 [ 150.355530][ T7175] exfat: Deprecated parameter 'namecase' [ 150.355746][ T7175] exfat: Deprecated parameter 'utf8' [ 150.373971][ T7171] vhci_hcd vhci_hcd.0: Device attached [ 150.404942][ T7175] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 150.404972][ T7169] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.690360][ T5923] usb 34-1: SetAddress Request (11) to port 0 [ 150.710639][ T5923] usb 34-1: new SuperSpeed USB device number 11 using vhci_hcd [ 150.745627][ T7172] vhci_hcd: connection closed [ 150.754954][ T48] vhci_hcd: stop threads [ 150.780916][ T48] vhci_hcd: release socket [ 150.806454][ T48] vhci_hcd: disconnect device [ 150.828402][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.842296][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.987865][ T7185] loop3: detected capacity change from 0 to 1024 [ 151.001007][ T7185] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.053056][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.111434][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.394640][ T7195] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 151.587469][ T7201] loop1: detected capacity change from 0 to 256 [ 151.602168][ T7201] exfat: Deprecated parameter 'namecase' [ 151.619982][ T7201] exfat: Deprecated parameter 'namecase' [ 151.626326][ T7201] exfat: Deprecated parameter 'utf8' [ 151.654221][ T7201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 152.067445][ T7210] loop2: detected capacity change from 0 to 16 [ 152.096241][ T7212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 152.102855][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.108156][ T7210] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.116609][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 152.352602][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.365097][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.387923][ T7213] vhci_hcd: connection closed [ 152.388303][ T58] vhci_hcd: stop threads [ 152.398787][ T58] vhci_hcd: release socket [ 152.403853][ T58] vhci_hcd: disconnect device [ 152.432549][ T5937] usb 36-1: enqueue for inactive port 0 [ 152.776249][ T7222] loop3: detected capacity change from 0 to 1024 [ 152.800735][ T7222] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.877467][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.955702][ T5937] usb usb36-port1: attempt power cycle [ 153.061444][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.613832][ T5937] usb usb36-port1: unable to enumerate USB device [ 153.657774][ T7243] loop2: detected capacity change from 0 to 4096 [ 153.673287][ T7243] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 153.735028][ T7246] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 153.868157][ T7243] syz.2.532 (7243) used greatest stack depth: 20848 bytes left [ 153.994612][ T7251] loop3: detected capacity change from 0 to 16 [ 154.018335][ T7251] erofs: (device loop3): mounted with root inode @ nid 36. [ 154.203058][ T7253] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 154.209665][ T7253] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 154.225892][ T7253] vhci_hcd vhci_hcd.0: Device attached [ 154.242614][ T5937] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.274948][ T7254] usbip_core: unknown command [ 154.279710][ T7254] vhci_hcd: unknown pdu 1650553953 [ 154.285233][ T7254] usbip_core: unknown command [ 154.290223][ T48] vhci_hcd: stop threads [ 154.296407][ T48] vhci_hcd: release socket [ 154.300893][ T48] vhci_hcd: disconnect device [ 154.432624][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 154.444342][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.455625][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.466725][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.478117][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.491778][ T5937] usb 3-1: config 0 descriptor?? [ 154.508277][ T5937] hub 3-1:0.0: USB hub found [ 154.719020][ T5937] hub 3-1:0.0: 1 port detected [ 155.147113][ T5937] usb 3-1: USB disconnect, device number 10 [ 155.635111][ T7277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 155.641768][ T7277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.653384][ T7277] vhci_hcd vhci_hcd.0: Device attached [ 155.669190][ T7281] loop1: detected capacity change from 0 to 16 [ 155.697654][ T7281] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.747036][ T7279] usbip_core: unknown command [ 155.760695][ T7279] vhci_hcd: unknown pdu 1650553953 [ 155.792600][ T7279] usbip_core: unknown command [ 155.811105][ T58] vhci_hcd: stop threads [ 155.817529][ T58] vhci_hcd: release socket [ 155.827439][ T5923] usb 34-1: device descriptor read/8, error -110 [ 155.830363][ T58] vhci_hcd: disconnect device [ 156.000864][ T7287] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 156.264589][ T5923] usb usb34-port1: attempt power cycle [ 156.811289][ T7299] loop1: detected capacity change from 0 to 2048 [ 156.888957][ T7299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.914493][ T5923] usb usb34-port1: unable to enumerate USB device [ 156.955750][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.006248][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.021403][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.234123][ T7310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 157.240738][ T7310] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 157.249711][ T7310] vhci_hcd vhci_hcd.0: Device attached [ 157.347630][ T7311] usbip_core: unknown command [ 157.363745][ T7311] vhci_hcd: unknown pdu 1650553953 [ 157.369117][ T7311] usbip_core: unknown command [ 157.403562][ T48] vhci_hcd: stop threads [ 157.407901][ T48] vhci_hcd: release socket [ 157.429564][ T48] vhci_hcd: disconnect device [ 157.520820][ T7320] loop2: detected capacity change from 0 to 16 [ 157.529095][ T7320] erofs: (device loop2): mounted with root inode @ nid 36. [ 158.504792][ T7342] netlink: 'syz.1.570': attribute type 10 has an invalid length. [ 158.764349][ T5937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.840582][ T7351] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 158.847198][ T7351] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.856629][ T7351] vhci_hcd vhci_hcd.0: Device attached [ 158.934907][ T7353] usbip_core: unknown command [ 158.948325][ T7353] vhci_hcd: unknown pdu 1650553953 [ 158.961694][ T7353] usbip_core: unknown command [ 158.971802][ T48] vhci_hcd: stop threads [ 158.980615][ T48] vhci_hcd: release socket [ 158.985584][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 158.997004][ T48] vhci_hcd: disconnect device [ 159.006474][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.023451][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.037157][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.048060][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.068079][ T5937] usb 3-1: config 0 descriptor?? [ 159.085112][ T5937] hub 3-1:0.0: USB hub found [ 159.299795][ T5937] hub 3-1:0.0: 1 port detected [ 159.556788][ T7364] loop3: detected capacity change from 0 to 16 [ 159.587769][ T7364] erofs: (device loop3): mounted with root inode @ nid 36. [ 159.617521][ T7366] binder: 7365:7366 ioctl c0306201 200000000680 returned -14 [ 159.731806][ T5937] usb 3-1: USB disconnect, device number 11 [ 160.578608][ T7386] binder: 7385:7386 ioctl c0306201 200000000680 returned -14 [ 160.622223][ T7389] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 160.628831][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.659968][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 160.659983][ T28] audit: type=1326 audit(1761056873.789:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 160.711661][ T7389] vhci_hcd vhci_hcd.0: Device attached [ 160.718773][ T7396] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 160.758991][ T28] audit: type=1326 audit(1761056873.839:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 160.815608][ T28] audit: type=1326 audit(1761056873.849:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 160.839616][ T7390] usbip_core: unknown command [ 160.853096][ T7390] vhci_hcd: unknown pdu 1650553953 [ 160.862701][ T7390] usbip_core: unknown command [ 160.868331][ T28] audit: type=1326 audit(1761056873.849:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 160.892139][ T28] audit: type=1326 audit(1761056873.849:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 160.907882][ T34] vhci_hcd: stop threads [ 160.939514][ T34] vhci_hcd: release socket [ 160.945239][ T28] audit: type=1326 audit(1761056873.859:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 160.951447][ T34] vhci_hcd: disconnect device [ 160.982661][ T28] audit: type=1326 audit(1761056873.859:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 161.011383][ T28] audit: type=1326 audit(1761056873.859:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 161.057764][ T28] audit: type=1326 audit(1761056873.859:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 161.098170][ T28] audit: type=1326 audit(1761056873.859:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 161.482224][ T7410] loop0: detected capacity change from 0 to 16 [ 161.551859][ T7410] erofs: (device loop0): mounted with root inode @ nid 36. [ 161.559743][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.560198][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.878804][ T7420] binder: 7419:7420 ioctl c0306201 200000000680 returned -14 [ 162.230709][ T7428] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 162.237343][ T7428] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.258760][ T7428] vhci_hcd vhci_hcd.0: Device attached [ 162.337246][ T7429] usbip_core: unknown command [ 162.342108][ T7429] vhci_hcd: unknown pdu 1650553953 [ 162.359899][ T7429] usbip_core: unknown command [ 162.377950][ T34] vhci_hcd: stop threads [ 162.388780][ T34] vhci_hcd: release socket [ 162.405577][ T34] vhci_hcd: disconnect device [ 162.523749][ T7434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2463596678 (39417546848 ns) > initial count (16034310144 ns). Using initial count to start timer. [ 162.714106][ T7446] loop0: detected capacity change from 0 to 16 [ 162.733086][ T7446] erofs: (device loop0): mounted with root inode @ nid 36. [ 163.001806][ T7449] binder: 7448:7449 ioctl c0306201 200000000680 returned -14 [ 163.195713][ T7453] loop2: detected capacity change from 0 to 4096 [ 163.236531][ T7458] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 163.411250][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.421077][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.069616][ T7477] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 164.076241][ T7477] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.087454][ T7477] vhci_hcd vhci_hcd.0: Device attached [ 164.104954][ T7481] binder: 7480:7481 ioctl c0306201 0 returned -14 [ 164.151727][ T7478] vhci_hcd: cannot find a urb of seqnum 1685467136 max seqnum 2 [ 164.176490][ T34] vhci_hcd: stop threads [ 164.188743][ T34] vhci_hcd: release socket [ 164.194760][ T34] vhci_hcd: disconnect device [ 164.496788][ T7489] loop1: detected capacity change from 0 to 16 [ 164.522909][ T7489] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.241648][ T7505] binder: 7502:7505 ioctl c0306201 0 returned -14 [ 165.472734][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.492639][ T7511] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 165.499428][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.526185][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 165.647554][ T7512] vhci_hcd: cannot find a urb of seqnum 1685467136 max seqnum 0 [ 165.663298][ T3462] vhci_hcd: stop threads [ 165.667852][ T3462] vhci_hcd: release socket [ 165.673067][ T3462] vhci_hcd: disconnect device [ 165.683486][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 165.697513][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.712020][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.742609][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.751961][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.778957][ T23] usb 3-1: config 0 descriptor?? [ 165.798055][ T23] hub 3-1:0.0: USB hub found [ 166.015221][ T23] hub 3-1:0.0: 1 port detected [ 166.340564][ T7533] binder: 7532:7533 ioctl c0306201 0 returned -14 [ 166.448809][ T23] usb 3-1: USB disconnect, device number 12 [ 166.464946][ T7537] loop1: detected capacity change from 0 to 16 [ 166.480053][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 166.480069][ T28] audit: type=1326 audit(1761056879.609:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.494467][ T7537] erofs: (device loop1): mounted with root inode @ nid 36. [ 166.557770][ T28] audit: type=1326 audit(1761056879.609:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.667655][ T28] audit: type=1326 audit(1761056879.649:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.698637][ T28] audit: type=1326 audit(1761056879.649:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.731789][ T28] audit: type=1326 audit(1761056879.659:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.811007][ T28] audit: type=1326 audit(1761056879.659:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.851183][ T7540] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 166.867933][ T28] audit: type=1326 audit(1761056879.659:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.908307][ T28] audit: type=1326 audit(1761056879.659:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 166.977056][ T28] audit: type=1326 audit(1761056879.659:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 167.067827][ T28] audit: type=1326 audit(1761056879.669:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 168.211605][ T7579] loop1: detected capacity change from 0 to 256 [ 168.227146][ T7579] exfat: Deprecated parameter 'utf8' [ 168.247341][ T7579] exfat: Deprecated parameter 'namecase' [ 168.301278][ T7579] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 169.128993][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 169.783462][ T7599] loop1: detected capacity change from 0 to 32768 [ 169.858669][ T7599] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.926530][ T7599] XFS (loop1): Ending clean mount [ 170.386316][ T5786] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.787002][ T7627] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 170.793629][ T7627] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.809131][ T7627] vhci_hcd vhci_hcd.0: Device attached [ 170.930439][ T7628] vhci_hcd: cannot find a urb of seqnum 12288 max seqnum 0 [ 170.948884][ T58] vhci_hcd: stop threads [ 170.953811][ T58] vhci_hcd: release socket [ 170.968659][ T58] vhci_hcd: disconnect device [ 171.163371][ T7640] loop0: detected capacity change from 0 to 64 [ 171.304453][ T7643] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 172.026053][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 172.026068][ T28] audit: type=1326 audit(1761056885.159:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.085671][ T28] audit: type=1326 audit(1761056885.189:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.158442][ T28] audit: type=1326 audit(1761056885.239:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.208864][ T28] audit: type=1326 audit(1761056885.239:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.241514][ T28] audit: type=1326 audit(1761056885.239:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.271868][ T28] audit: type=1326 audit(1761056885.269:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.295185][ T28] audit: type=1326 audit(1761056885.279:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.361510][ T28] audit: type=1326 audit(1761056885.279:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.411053][ T28] audit: type=1326 audit(1761056885.279:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.476491][ T28] audit: type=1326 audit(1761056885.279:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 172.892608][ T7670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 172.899211][ T7670] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 172.938657][ T7670] vhci_hcd vhci_hcd.0: Device attached [ 173.095708][ T7671] vhci_hcd: cannot find a urb of seqnum 12288 max seqnum 0 [ 173.116860][ T34] vhci_hcd: stop threads [ 173.121188][ T34] vhci_hcd: release socket [ 173.150480][ T34] vhci_hcd: disconnect device [ 173.480118][ T7688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2463596678 (39417546848 ns) > initial count (16034310144 ns). Using initial count to start timer. [ 173.577258][ T7692] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 173.796376][ T7696] tmpfs: Unknown parameter 'quo' [ 174.653665][ T7715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 174.660354][ T7715] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 174.669567][ T7712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2463596678 (39417546848 ns) > initial count (16034310144 ns). Using initial count to start timer. [ 174.688841][ T7715] vhci_hcd vhci_hcd.0: Device attached [ 174.768546][ T7716] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 174.785270][ T58] vhci_hcd: stop threads [ 174.789862][ T58] vhci_hcd: release socket [ 174.807093][ T58] vhci_hcd: disconnect device [ 175.031934][ T7722] tmpfs: Unknown parameter 'quo' [ 176.025505][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.061488][ T7739] loop3: detected capacity change from 0 to 40427 [ 176.071427][ T7739] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 176.079339][ T7739] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 176.099764][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.111947][ T7739] F2FS-fs (loop3): invalid crc value [ 176.162023][ T7739] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.227149][ T7739] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 176.234654][ T7739] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.317166][ T7753] tmpfs: Unknown parameter 'quo' [ 176.557746][ T7757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 176.564368][ T7757] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.642983][ T7757] vhci_hcd vhci_hcd.0: Device attached [ 176.787266][ T7759] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 176.814566][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.841486][ T34] vhci_hcd: stop threads [ 176.860262][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.863584][ T34] vhci_hcd: release socket [ 176.894113][ T34] vhci_hcd: disconnect device [ 176.964314][ T23] usb 38-1: enqueue for inactive port 0 [ 177.504329][ T23] usb usb38-port1: attempt power cycle [ 178.005425][ T7787] loop1: detected capacity change from 0 to 1024 [ 178.214250][ T23] usb usb38-port1: unable to enumerate USB device [ 178.262625][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 178.262642][ T28] audit: type=1800 audit(1761056891.389:708): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.740" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 178.365025][ T48] hfsplus: b-tree write err: -5, ino 4 [ 178.379725][ T7797] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 178.386336][ T7797] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 178.395765][ T7797] vhci_hcd vhci_hcd.0: Device attached [ 178.510258][ T7798] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 178.529355][ T34] vhci_hcd: stop threads [ 178.547051][ T34] vhci_hcd: release socket [ 178.551565][ T34] vhci_hcd: disconnect device [ 178.970406][ T7815] loop2: detected capacity change from 0 to 256 [ 178.980351][ T7815] exfat: Deprecated parameter 'utf8' [ 179.012785][ T7815] exfat: Deprecated parameter 'namecase' [ 179.124823][ T7815] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 179.582696][ T28] audit: type=1326 audit(1761056892.709:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 179.674976][ T28] audit: type=1326 audit(1761056892.709:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 179.802538][ T28] audit: type=1326 audit(1761056892.719:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 179.834111][ T28] audit: type=1326 audit(1761056892.719:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 179.892989][ T28] audit: type=1326 audit(1761056892.719:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 180.067381][ T28] audit: type=1326 audit(1761056892.729:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 180.160974][ T7834] loop1: detected capacity change from 0 to 4096 [ 180.193629][ T28] audit: type=1326 audit(1761056892.739:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 180.276191][ T7834] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 180.291729][ T28] audit: type=1326 audit(1761056892.739:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 180.310095][ T7834] UDF-fs: Scanning with blocksize 512 failed [ 180.349286][ T28] audit: type=1326 audit(1761056892.739:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 180.442323][ T7834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.711583][ T7834] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 181.111661][ T7853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 181.250920][ T7861] netlink: 'syz.3.770': attribute type 10 has an invalid length. [ 181.326488][ T5795] Bluetooth: hci2: unexpected cc 0x202f length: 1 < 9 [ 181.428690][ T7866] loop1: detected capacity change from 0 to 4096 [ 181.726955][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.738794][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.430426][ T7897] loop1: detected capacity change from 0 to 4096 [ 183.449534][ T7921] loop0: detected capacity change from 0 to 4096 [ 183.626734][ T7930] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 183.662300][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.685301][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.044546][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 184.044562][ T28] audit: type=1326 audit(1761056897.179:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.078859][ T28] audit: type=1326 audit(1761056897.179:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.108235][ T28] audit: type=1326 audit(1761056897.209:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.135917][ T28] audit: type=1326 audit(1761056897.209:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.169513][ T28] audit: type=1326 audit(1761056897.209:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.201256][ T28] audit: type=1326 audit(1761056897.209:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.228958][ T28] audit: type=1326 audit(1761056897.239:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.258095][ T28] audit: type=1326 audit(1761056897.239:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.290180][ T28] audit: type=1326 audit(1761056897.239:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.337462][ T28] audit: type=1326 audit(1761056897.239:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a78efc9 code=0x7ffc0000 [ 184.390961][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 184.477014][ T7952] loop1: detected capacity change from 0 to 512 [ 184.522703][ T7952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.545095][ T7952] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.591808][ T7952] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 18: comm syz.1.808: lblock 23 mapped to illegal pblock 18 (length 1) [ 184.592580][ T5778] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.622922][ T7952] EXT4-fs (loop1): Remounting filesystem read-only [ 184.675095][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.802582][ T5778] usb 3-1: Using ep0 maxpacket: 16 [ 184.817790][ T5778] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 184.832488][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.840650][ T5778] usb 3-1: Product: syz [ 184.871676][ T5778] usb 3-1: Manufacturer: syz [ 184.876607][ T5778] usb 3-1: SerialNumber: syz [ 184.894958][ T5778] usb 3-1: config 0 descriptor?? [ 184.902565][ T5778] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 185.077650][ T7972] loop0: detected capacity change from 0 to 128 [ 185.094365][ T7972] ======================================================= [ 185.094365][ T7972] WARNING: The mand mount option has been deprecated and [ 185.094365][ T7972] and is ignored by this kernel. Remove the mand [ 185.094365][ T7972] option from the mount to silence this warning. [ 185.094365][ T7972] ======================================================= [ 185.204787][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.218116][ T5778] usb 3-1: USB disconnect, device number 13 [ 185.225245][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.700227][ T5927] usb 1-1: USB disconnect, device number 3 [ 185.819816][ T1305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.927180][ T1305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.080988][ T1305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.245062][ T1305] team0: Port device netdevsim0 removed [ 186.259661][ T1305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.278150][ T7994] loop1: detected capacity change from 0 to 512 [ 186.317708][ T7994] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 186.361907][ T7994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.435332][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.445988][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.448408][ T7994] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.827: Failed to acquire dquot type 1 [ 186.455141][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.473545][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.481620][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.491209][ T7994] EXT4-fs (loop1): Remounting filesystem read-only [ 186.501782][ T7994] EXT4-fs (loop1): 1 truncate cleaned up [ 186.520070][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.578578][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.739538][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.932892][ T5922] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 186.978172][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 187.133011][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 187.140540][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 187.156924][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.168162][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.177439][ T5922] usb 3-1: Product: syz [ 187.181776][ T5922] usb 3-1: Manufacturer: syz [ 187.186551][ T5922] usb 3-1: SerialNumber: syz [ 187.195009][ T5922] usb 3-1: config 0 descriptor?? [ 187.329590][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 187.641038][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.666987][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.690915][ T7998] bridge_slave_0: entered allmulticast mode [ 187.715912][ T7998] bridge_slave_0: entered promiscuous mode [ 187.763013][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.778842][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.790087][ T7998] bridge_slave_1: entered allmulticast mode [ 187.801765][ T7998] bridge_slave_1: entered promiscuous mode [ 187.981704][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.995206][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.114669][ T5792] Bluetooth: hci3: unexpected subevent 0x01 length: 37 > 18 [ 188.132027][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 188.144078][ T5792] CPU: 1 PID: 5792 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 188.151697][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.161813][ T5792] Workqueue: hci3 hci_rx_work [ 188.166576][ T5792] Call Trace: [ 188.169875][ T5792] [ 188.172834][ T5792] dump_stack_lvl+0x16c/0x230 [ 188.177546][ T5792] ? show_regs_print_info+0x20/0x20 [ 188.182785][ T5792] ? load_image+0x3b0/0x3b0 [ 188.187340][ T5792] sysfs_create_dir_ns+0x256/0x280 [ 188.192671][ T5792] ? hci_rx_work+0x43a/0xd80 [ 188.197305][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 188.202213][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 188.207556][ T5792] kobject_add_internal+0x6b8/0xc70 [ 188.212818][ T5792] kobject_add+0x156/0x220 [ 188.217282][ T5792] ? __rwlock_init+0x150/0x150 [ 188.222077][ T5792] ? kobject_init+0x1e0/0x1e0 [ 188.226821][ T5792] ? _raw_spin_unlock+0x28/0x40 [ 188.231696][ T5792] ? get_device_parent+0x366/0x390 [ 188.236848][ T5792] device_add+0x408/0xc20 [ 188.241214][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 188.246192][ T5792] le_conn_complete_evt+0xf36/0x1500 [ 188.251519][ T5792] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 188.257793][ T5792] ? bt_info+0x160/0x160 [ 188.262081][ T5792] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 188.267748][ T5792] ? skb_pull_data+0xfb/0x200 [ 188.272552][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 188.278145][ T5792] ? hci_remote_host_features_evt+0x160/0x160 [ 188.284337][ T5792] hci_event_packet+0x795/0x1210 [ 188.289405][ T5792] ? bis_list+0x290/0x290 [ 188.293798][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 188.299035][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 188.304269][ T5792] hci_rx_work+0x43a/0xd80 [ 188.308731][ T5792] ? process_scheduled_works+0x957/0x15b0 [ 188.314485][ T5792] process_scheduled_works+0xa45/0x15b0 [ 188.320082][ T5792] ? assign_work+0x400/0x400 [ 188.324707][ T5792] ? assign_work+0x39e/0x400 [ 188.329326][ T5792] worker_thread+0xa55/0xfc0 [ 188.333978][ T5792] kthread+0x2fa/0x390 [ 188.338061][ T5792] ? pr_cont_work+0x560/0x560 [ 188.342761][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 188.347383][ T5792] ret_from_fork+0x48/0x80 [ 188.351824][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 188.356441][ T5792] ret_from_fork_asm+0x11/0x20 [ 188.361247][ T5792] [ 188.367970][ T5792] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 188.373470][ T7998] team0: Port device team_slave_0 added [ 188.382116][ T5792] Bluetooth: hci3: failed to register connection device [ 188.432328][ T7998] team0: Port device team_slave_1 added [ 188.467321][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.475607][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.509097][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.521833][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.529325][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.555533][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.602887][ T5792] Bluetooth: hci2: command tx timeout [ 188.624363][ T1305] hsr_slave_0: left promiscuous mode [ 188.631072][ T1305] hsr_slave_1: left promiscuous mode [ 188.641826][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.650230][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.659409][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.668421][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.676651][ T1305] bridge_slave_1: left allmulticast mode [ 188.682463][ T1305] bridge_slave_1: left promiscuous mode [ 188.690336][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.704663][ T1305] bridge_slave_0: left allmulticast mode [ 188.710359][ T1305] bridge_slave_0: left promiscuous mode [ 188.716603][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.748636][ T1305] veth1_macvtap: left promiscuous mode [ 188.754837][ T1305] veth0_macvtap: left promiscuous mode [ 188.762034][ T1305] veth1_vlan: left promiscuous mode [ 188.767833][ T1305] veth0_vlan: left promiscuous mode [ 189.512000][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 189.567139][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 189.621756][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.701048][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.738551][ T5927] usb 3-1: USB disconnect, device number 14 [ 190.415526][ T1305] bond0 (unregistering): Released all slaves [ 190.504987][ T7998] hsr_slave_0: entered promiscuous mode [ 190.511717][ T7998] hsr_slave_1: entered promiscuous mode [ 190.518114][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.528846][ T7998] Cannot create hsr debugfs directory [ 190.692714][ T5792] Bluetooth: hci2: command tx timeout [ 190.751023][ T8086] loop3: detected capacity change from 0 to 2048 [ 190.762920][ T8086] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 190.979531][ T8086] loop3: detected capacity change from 0 to 4096 [ 191.046543][ T8090] Bluetooth: MGMT ver 1.22 [ 191.051439][ T8090] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 191.088969][ T7998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.108170][ T7998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.130032][ T7998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.156196][ T7998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.327165][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 191.327192][ T28] audit: type=1326 audit(1761056904.459:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.400107][ T28] audit: type=1326 audit(1761056904.499:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.466006][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.477717][ T28] audit: type=1326 audit(1761056904.509:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.533257][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.541146][ T28] audit: type=1326 audit(1761056904.509:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.586313][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.593618][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.608216][ T28] audit: type=1326 audit(1761056904.509:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.633925][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.641164][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.672730][ T28] audit: type=1326 audit(1761056904.519:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.750883][ T28] audit: type=1326 audit(1761056904.519:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.817007][ T28] audit: type=1326 audit(1761056904.529:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.873810][ T28] audit: type=1326 audit(1761056904.529:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 191.927822][ T28] audit: type=1326 audit(1761056904.529:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8efc9 code=0x7ffc0000 [ 192.157842][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.763156][ T5792] Bluetooth: hci2: command tx timeout [ 192.817865][ T7998] veth0_vlan: entered promiscuous mode [ 192.842248][ T7998] veth1_vlan: entered promiscuous mode [ 192.954813][ T7998] veth0_macvtap: entered promiscuous mode [ 192.978372][ T7998] veth1_macvtap: entered promiscuous mode [ 193.056435][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.078238][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.102494][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.130898][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.149604][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.190898][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.222431][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.242842][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.272698][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.314161][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.368414][ T7998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.392580][ T7998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.409648][ T7998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.418681][ T7998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.498753][ T8148] tipc: Started in network mode [ 193.509871][ T8148] tipc: Node identity 760c5c427f74, cluster identity 4711 [ 193.526035][ T8148] tipc: Enabled bearer , priority 0 [ 193.559628][ T8148] syzkaller0: entered promiscuous mode [ 193.571233][ T8148] syzkaller0: entered allmulticast mode [ 193.684142][ T8148] tipc: Resetting bearer [ 193.704589][ T8147] tipc: Resetting bearer [ 193.717868][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.728556][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.751985][ T8147] tipc: Disabling bearer [ 193.824830][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.847045][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.104180][ T8161] netlink: 'syz.4.823': attribute type 10 has an invalid length. [ 194.171353][ T8161] team0: Port device netdevsim0 added [ 194.342592][ T5937] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 194.544178][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 194.571259][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 103, changing to 10 [ 194.598238][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 9345, setting to 1024 [ 194.626715][ T5937] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 194.647105][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.663207][ T5937] usb 3-1: Product: syz [ 194.667714][ T5937] usb 3-1: Manufacturer: syz [ 194.677843][ T5937] usb 3-1: SerialNumber: syz [ 194.689162][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.695669][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.715106][ T5937] usb 3-1: config 0 descriptor?? [ 194.720931][ T8160] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.736296][ T5937] hub 3-1:0.0: bad descriptor, ignoring hub [ 194.748049][ T5937] hub: probe of 3-1:0.0 failed with error -5 [ 194.761755][ T5937] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 194.826812][ T8173] loop1: detected capacity change from 0 to 4096 [ 194.853166][ T5792] Bluetooth: hci2: command tx timeout [ 194.952087][ T5927] usb 3-1: USB disconnect, device number 15 [ 195.385973][ T8180] loop1: detected capacity change from 0 to 40427 [ 195.397459][ T8180] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 195.404599][ T8180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.426734][ T8180] F2FS-fs (loop1): invalid crc value [ 195.448227][ T8180] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.511478][ T8180] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.518684][ T8180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.774285][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 196.096401][ T8199] loop1: detected capacity change from 0 to 256 [ 196.135649][ T8199] FAT-fs (loop1): Directory bread(block 64) failed [ 196.152441][ T8199] FAT-fs (loop1): Directory bread(block 65) failed [ 196.172844][ T8199] FAT-fs (loop1): Directory bread(block 66) failed [ 196.192429][ T8199] FAT-fs (loop1): Directory bread(block 67) failed [ 196.199175][ T8199] FAT-fs (loop1): Directory bread(block 68) failed [ 196.232442][ T8199] FAT-fs (loop1): Directory bread(block 69) failed [ 196.239354][ T8199] FAT-fs (loop1): Directory bread(block 70) failed [ 196.252462][ T8199] FAT-fs (loop1): Directory bread(block 71) failed [ 196.259338][ T8199] FAT-fs (loop1): Directory bread(block 72) failed [ 196.282632][ T8199] FAT-fs (loop1): Directory bread(block 73) failed [ 196.724859][ T8209] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2463596678 (39417546848 ns) > initial count (16034310144 ns). Using initial count to start timer. [ 196.745895][ T8212] netlink: 'syz.1.891': attribute type 10 has an invalid length. [ 196.906655][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.915772][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.721767][ T8229] loop3: detected capacity change from 0 to 2048 [ 197.737029][ T8229] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.757813][ T8229] NILFS (loop3): mounting unchecked fs [ 197.786126][ T8229] NILFS (loop3): recovery complete [ 197.811981][ T8230] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.087792][ T8232] loop4: detected capacity change from 0 to 4096 [ 198.108028][ T8232] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.135143][ T8238] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.163412][ T8238] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.343833][ T8244] 8021q: VLANs not supported on ipvlan0 [ 198.354328][ T8232] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.379725][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.432709][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 198.432724][ T28] audit: type=1326 audit(1761056911.559:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.481198][ T8252] loop3: detected capacity change from 0 to 164 [ 198.504766][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.520650][ T28] audit: type=1326 audit(1761056911.559:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.547974][ T28] audit: type=1326 audit(1761056911.559:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.585023][ T28] audit: type=1326 audit(1761056911.559:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.630993][ T28] audit: type=1326 audit(1761056911.559:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.690814][ T28] audit: type=1326 audit(1761056911.569:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.724922][ T28] audit: type=1326 audit(1761056911.569:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.757759][ T28] audit: type=1326 audit(1761056911.579:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.785150][ T28] audit: type=1326 audit(1761056911.579:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 198.818816][ T28] audit: type=1326 audit(1761056911.579:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907d18efc9 code=0x7ffc0000 [ 200.107275][ T8303] loop2: detected capacity change from 0 to 256 [ 200.161751][ T8303] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 200.330691][ T8297] loop3: detected capacity change from 0 to 40427 [ 200.340882][ T8297] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 200.367545][ T8297] F2FS-fs (loop3): invalid crc value [ 200.378255][ T8297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.452023][ T8297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 200.667216][ T8324] loop2: detected capacity change from 0 to 512 [ 200.707005][ T8324] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.928: casefold flag without casefold feature [ 200.752968][ T8324] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.928: couldn't read orphan inode 15 (err -117) [ 200.784195][ T8324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.005506][ T8333] loop3: detected capacity change from 0 to 4096 [ 201.097994][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.325068][ T8347] loop3: detected capacity change from 0 to 4096 [ 201.493862][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.509321][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.755947][ T8369] loop4: detected capacity change from 0 to 256 [ 201.763557][ T8369] exfat: Deprecated parameter 'utf8' [ 201.768954][ T8369] exfat: Deprecated parameter 'utf8' [ 201.780593][ T8369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 201.874760][ T8371] loop4: detected capacity change from 0 to 256 [ 201.902660][ T5922] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 202.036867][ T8378] loop4: detected capacity change from 0 to 256 [ 202.110322][ T5922] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 202.122230][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.131859][ T5922] usb 3-1: Product: syz [ 202.136265][ T5922] usb 3-1: Manufacturer: syz [ 202.141100][ T5922] usb 3-1: SerialNumber: syz [ 202.149509][ T5922] usb 3-1: config 0 descriptor?? [ 202.159704][ T5922] ch341 3-1:0.0: ch341-uart converter detected [ 202.495689][ T8395] loop3: detected capacity change from 0 to 256 [ 202.504483][ T8395] exfat: Deprecated parameter 'utf8' [ 202.509867][ T8395] exfat: Deprecated parameter 'utf8' [ 202.529552][ T8395] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 202.766018][ T8408] bridge: RTM_DELNEIGH with unconfigured vlan 4 on bridge0 [ 202.947475][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.963199][ T5922] usb 3-1: failed to send control message: -71 [ 202.970839][ T5922] ch341-uart: probe of ttyUSB0 failed with error -71 [ 202.980148][ T5922] usb 3-1: USB disconnect, device number 16 [ 202.987848][ T5922] ch341 3-1:0.0: device disconnected [ 203.134482][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 203.159917][ T5937] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.175409][ T5937] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.187521][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 203.197851][ T5937] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 203.206905][ T5937] usb 5-1: Product: syz [ 203.211178][ T5937] usb 5-1: Manufacturer: syz [ 203.222126][ T5937] hub 5-1:4.0: USB hub found [ 203.430985][ T5937] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 203.578087][ T8425] loop2: detected capacity change from 0 to 256 [ 203.585614][ T8425] exfat: Deprecated parameter 'utf8' [ 203.592180][ T8425] exfat: Deprecated parameter 'utf8' [ 203.611758][ T8425] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 203.795056][ T23] usb 5-1: USB disconnect, device number 2 [ 204.104835][ T8436] loop1: detected capacity change from 0 to 4096 [ 204.586697][ T8463] loop3: detected capacity change from 0 to 1024 [ 204.612682][ T8463] hfsplus: bad catalog file entry [ 204.618661][ T8463] hfsplus: failed to load root directory [ 205.323649][ T8491] warning: `syz.3.993' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.377974][ T5937] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 205.462132][ T8495] loop4: detected capacity change from 0 to 256 [ 205.799685][ T8493] loop3: detected capacity change from 0 to 40427 [ 205.807844][ T8493] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 205.815720][ T8493] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.829946][ T8493] F2FS-fs (loop3): invalid crc value [ 205.848469][ T8493] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.908019][ T8493] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 205.915325][ T8493] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 205.924916][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 205.952512][ T5937] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.964555][ T5792] Bluetooth: hci0: command tx timeout [ 205.973128][ T5937] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.989882][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 205.999211][ T5937] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 206.008127][ T5937] usb 3-1: Product: syz [ 206.012346][ T5937] usb 3-1: Manufacturer: syz [ 206.033408][ T5937] hub 3-1:4.0: USB hub found [ 206.258500][ T5937] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 206.542757][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1004'. [ 206.562057][ T8518] netlink: 'syz.4.1004': attribute type 7 has an invalid length. [ 206.596940][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 206.623095][ T23] usb 3-1: USB disconnect, device number 17 [ 206.634474][ T8518] gretap0: entered promiscuous mode [ 206.647784][ T8518] gretap0: left promiscuous mode [ 206.667039][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 206.706659][ T8522] xt_hashlimit: size too large, truncated to 1048576 [ 206.714045][ T8522] xt_hashlimit: max too large, truncated to 1048576 [ 206.877113][ T8531] syz.4.1010 uses obsolete (PF_INET,SOCK_PACKET) [ 206.934254][ T8533] loop3: detected capacity change from 0 to 256 [ 206.941843][ T8533] exfat: Deprecated parameter 'utf8' [ 206.947396][ T8533] exfat: Deprecated parameter 'utf8' [ 206.960402][ T8533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 207.394346][ T8548] kvm: pic: non byte write [ 207.617267][ T8557] loop2: detected capacity change from 0 to 256 [ 207.633738][ T8557] exfat: Deprecated parameter 'utf8' [ 207.639120][ T8557] exfat: Deprecated parameter 'utf8' [ 207.658632][ T8557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 207.835221][ T8561] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 208.224629][ T8583] loop1: detected capacity change from 0 to 256 [ 208.232049][ T8583] exfat: Deprecated parameter 'utf8' [ 208.242921][ T8583] exfat: Deprecated parameter 'utf8' [ 208.284905][ T8583] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 208.554203][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.582921][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.690125][ T5792] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 208.964210][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1042'. [ 208.975376][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1042'. [ 209.039246][ T8611] loop3: detected capacity change from 0 to 1024 [ 209.064228][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.210490][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.610623][ T8635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.413004][ T5927] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5927 comm: kworker/1:12) [ 210.584996][ T8668] loop2: detected capacity change from 0 to 512 [ 210.606615][ T8668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.635139][ T8668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.674521][ T8668] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.784333][ T8668] EXT4-fs error (device loop2): __ext4_new_inode:1284: comm syz.2.1065: failed to insert inode 16: doubly allocated? [ 210.869852][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.929364][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.938405][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.987743][ T8686] loop2: detected capacity change from 0 to 1024 [ 211.010250][ T8686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.063880][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.122274][ T8690] loop4: detected capacity change from 0 to 2048 [ 211.136912][ T8690] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 211.215561][ T8690] loop4: detected capacity change from 0 to 512 [ 211.224391][ T8690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 211.238693][ T8690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.256576][ T8690] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1072: bad orphan inode 131083 [ 211.270112][ T8690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.440703][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.539384][ T8708] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 211.572487][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.588132][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.626170][ T8710] loop3: detected capacity change from 0 to 256 [ 211.640868][ T8710] exfat: Unknown parameter 'zero_size_dir' [ 211.730948][ T8710] loop3: detected capacity change from 0 to 1024 [ 211.760050][ T8710] EXT4-fs: Mount option(s) incompatible with ext3 [ 212.064981][ T8734] loop4: detected capacity change from 0 to 128 [ 212.081700][ T8734] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.101147][ T8734] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.126804][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 212.133021][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 212.179709][ T7998] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.462644][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 212.579976][ T8760] loop3: detected capacity change from 0 to 256 [ 212.632944][ T8760] FAT-fs (loop3): Directory bread(block 64) failed [ 212.639557][ T8760] FAT-fs (loop3): Directory bread(block 65) failed [ 212.648786][ T8760] FAT-fs (loop3): Directory bread(block 66) failed [ 212.656356][ T8760] FAT-fs (loop3): Directory bread(block 67) failed [ 212.662671][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 212.669441][ T8760] FAT-fs (loop3): Directory bread(block 68) failed [ 212.675158][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 212.676101][ T8760] FAT-fs (loop3): Directory bread(block 69) failed [ 212.698078][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.698313][ T8760] FAT-fs (loop3): Directory bread(block 70) failed [ 212.716381][ T9] usb 3-1: Product: syz [ 212.720616][ T9] usb 3-1: Manufacturer: syz [ 212.720942][ T8760] FAT-fs (loop3): Directory bread(block 71) failed [ 212.731432][ T9] usb 3-1: SerialNumber: syz [ 212.732211][ T8760] FAT-fs (loop3): Directory bread(block 72) failed [ 212.748403][ T8760] FAT-fs (loop3): Directory bread(block 73) failed [ 212.753894][ T9] usb 3-1: config 0 descriptor?? [ 212.774126][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 212.840972][ T8770] loop4: detected capacity change from 0 to 512 [ 212.851804][ T8770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.889287][ T8770] EXT4-fs (loop4): 1 truncate cleaned up [ 212.896811][ T8770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.025191][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.440117][ T8784] loop4: detected capacity change from 0 to 32768 [ 213.448245][ T8784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1106 (8784) [ 213.466806][ T8784] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.477149][ T8784] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 213.486438][ T8784] BTRFS info (device loop4): setting nodatacow, compression disabled [ 213.494856][ T8784] BTRFS info (device loop4): turning on flush-on-commit [ 213.502073][ T8784] BTRFS error (device loop4): unrecognized commit_interval value 0x0000000080000000 [ 213.516538][ T8784] BTRFS error (device loop4): open_ctree failed: -22 [ 213.734044][ T5792] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 213.736350][ T8786] loop4: detected capacity change from 0 to 512 [ 213.746246][ T5792] Bluetooth: hci3: Injecting HCI hardware error event [ 213.766838][ T5795] Bluetooth: hci3: hardware error 0x00 [ 213.821093][ T8786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.834180][ T8786] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.005171][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.132774][ T9] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 214.145080][ T8799] loop1: detected capacity change from 0 to 256 [ 214.182167][ T8799] FAT-fs (loop1): Directory bread(block 64) failed [ 214.189337][ T8799] FAT-fs (loop1): Directory bread(block 65) failed [ 214.196834][ T8799] FAT-fs (loop1): Directory bread(block 66) failed [ 214.203752][ T8799] FAT-fs (loop1): Directory bread(block 67) failed [ 214.210746][ T8799] FAT-fs (loop1): Directory bread(block 68) failed [ 214.218181][ T8799] FAT-fs (loop1): Directory bread(block 69) failed [ 214.231906][ T8799] FAT-fs (loop1): Directory bread(block 70) failed [ 214.240226][ T8801] block nbd3: NBD_DISCONNECT [ 214.242124][ T8799] FAT-fs (loop1): Directory bread(block 71) failed [ 214.252088][ T8799] FAT-fs (loop1): Directory bread(block 72) failed [ 214.259340][ T8799] FAT-fs (loop1): Directory bread(block 73) failed [ 214.263351][ T8801] block nbd3: Disconnected due to user request. [ 214.278464][ T8801] block nbd3: shutting down sockets [ 214.402875][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 214.419860][ T9] sq930x: probe of 3-1:0.0 failed with error -22 [ 214.452227][ T8805] netlink: 1020 bytes leftover after parsing attributes in process `syz.3.1114'. [ 214.467339][ T9] usb 3-1: USB disconnect, device number 18 [ 214.597097][ T8803] loop4: detected capacity change from 0 to 32768 [ 214.608625][ T8803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1113 (8803) [ 214.625520][ T8803] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.636030][ T8803] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 214.644949][ T8803] BTRFS info (device loop4): using free space tree [ 214.715557][ T8803] BTRFS info (device loop4): enabling ssd optimizations [ 214.722885][ T8803] BTRFS info (device loop4): auto enabling async discard [ 214.975064][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 214.975082][ T28] audit: type=1800 audit(1761056932.106:930): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1113" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 215.339284][ T7998] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.629709][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 215.764396][ T8846] loop3: detected capacity change from 0 to 256 [ 215.794917][ T8846] FAT-fs (loop3): Directory bread(block 64) failed [ 215.809551][ T8846] FAT-fs (loop3): Directory bread(block 65) failed [ 215.816557][ T8846] FAT-fs (loop3): Directory bread(block 66) failed [ 215.824952][ T8846] FAT-fs (loop3): Directory bread(block 67) failed [ 215.831866][ T8846] FAT-fs (loop3): Directory bread(block 68) failed [ 215.839602][ T8846] FAT-fs (loop3): Directory bread(block 69) failed [ 215.846391][ T8846] FAT-fs (loop3): Directory bread(block 70) failed [ 215.853432][ T8846] FAT-fs (loop3): Directory bread(block 71) failed [ 215.860126][ T8846] FAT-fs (loop3): Directory bread(block 72) failed [ 215.867319][ T8846] FAT-fs (loop3): Directory bread(block 73) failed [ 215.882530][ T5795] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 216.442820][ T8861] loop1: detected capacity change from 0 to 32768 [ 216.526723][ T5927] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 216.714719][ T5927] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 216.719101][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 216.724730][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.744384][ T5927] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 216.753831][ T5927] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 216.762822][ T5927] usb 5-1: Manufacturer: syz [ 216.770451][ T5927] usb 5-1: config 0 descriptor?? [ 216.872655][ T5927] rc_core: IR keymap rc-hauppauge not found [ 216.878740][ T5927] Registered IR keymap rc-empty [ 216.884883][ T5927] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 216.897739][ T5927] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 217.015614][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 217.026404][ T5937] usb 5-1: USB disconnect, device number 3 [ 217.191497][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1139'. [ 217.849696][ T8905] loop4: detected capacity change from 0 to 128 [ 218.325971][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.412217][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.511161][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.628778][ T12] team0: Port device netdevsim0 removed [ 218.648501][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.008077][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.018431][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.027946][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.038724][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.047248][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.054994][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.430974][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 219.611462][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.619083][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.627338][ T8934] bridge_slave_0: entered allmulticast mode [ 219.637776][ T8934] bridge_slave_0: entered promiscuous mode [ 219.667686][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.675402][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.683639][ T8934] bridge_slave_1: entered allmulticast mode [ 219.691141][ T8934] bridge_slave_1: entered promiscuous mode [ 219.750545][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.766824][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.845919][ T8934] team0: Port device team_slave_0 added [ 219.857063][ T8934] team0: Port device team_slave_1 added [ 219.935659][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.942900][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.971302][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.984490][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.991563][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.019246][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.058610][ T12] hsr_slave_0: left promiscuous mode [ 220.067973][ T12] hsr_slave_1: left promiscuous mode [ 220.074863][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.082767][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.091005][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.098640][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.106830][ T12] bridge_slave_1: left allmulticast mode [ 220.118129][ T12] bridge_slave_1: left promiscuous mode [ 220.124225][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.173334][ T12] bridge_slave_0: left allmulticast mode [ 220.196675][ T12] bridge_slave_0: left promiscuous mode [ 220.205118][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.294368][ T12] veth1_macvtap: left promiscuous mode [ 220.303790][ T12] veth0_macvtap: left promiscuous mode [ 220.309582][ T12] veth1_vlan: left promiscuous mode [ 220.322334][ T12] veth0_vlan: left promiscuous mode [ 221.004091][ T8972] loop3: detected capacity change from 0 to 1024 [ 221.014722][ T8972] hfsplus: failed to load root directory [ 221.084015][ T5795] Bluetooth: hci2: command tx timeout [ 221.126611][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.228957][ T12] team0 (unregistering): Port device team_slave_0 removed [ 221.301235][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.370995][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.048429][ T12] bond0 (unregistering): Released all slaves [ 222.321176][ T8934] hsr_slave_0: entered promiscuous mode [ 222.343379][ T8934] hsr_slave_1: entered promiscuous mode [ 222.351726][ T8934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.368059][ T8934] Cannot create hsr debugfs directory [ 222.515942][ T8986] loop3: detected capacity change from 0 to 40427 [ 222.525378][ T8986] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 222.533264][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 222.545032][ T8986] F2FS-fs (loop3): invalid crc value [ 222.558405][ T8986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.578689][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'. [ 222.590485][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 222.628462][ T8986] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 222.636046][ T8986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 222.834641][ T8934] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.850764][ T8934] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.888351][ T8934] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.898907][ T8995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.901863][ T8934] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.940044][ T8995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.084187][ T5778] general protection fault, probably for non-canonical address 0xdffffc0000000026: 0000 [#1] PREEMPT SMP KASAN [ 223.095986][ T5778] KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] [ 223.104440][ T5778] CPU: 0 PID: 5778 Comm: kworker/0:3 Not tainted syzkaller #0 [ 223.111935][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.122034][ T5778] Workqueue: events l2cap_info_timeout [ 223.127638][ T5778] RIP: 0010:__lock_acquire+0xeb/0x7c80 [ 223.133148][ T5778] Code: 85 dc 66 00 00 83 3d 9f c0 e3 0c 00 48 89 9c 24 f0 00 00 00 0f 84 11 10 00 00 83 3d 6e d1 58 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 31 ea 75 00 48 8b [ 223.152831][ T5778] RSP: 0018:ffffc9000437f600 EFLAGS: 00010002 [ 223.158914][ T5778] RAX: 0000000000000026 RBX: 1ffff9200086fee4 RCX: 0000000000000000 [ 223.166903][ T5778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 223.174885][ T5778] RBP: ffffc9000437f848 R08: dffffc0000000000 R09: 0000000000000000 [ 223.183662][ T5778] R10: dffffc0000000000 R11: fffffbfff1c9514e R12: 0000000000000001 [ 223.193261][ T5778] R13: 0000000000000000 R14: ffff88802e099e00 R15: 0000000000000000 [ 223.202149][ T5778] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 223.212217][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.219082][ T5778] CR2: 00007fdd04d722e0 CR3: 0000000062bba000 CR4: 00000000003506f0 [ 223.227251][ T5778] Call Trace: [ 223.230753][ T5778] [ 223.233696][ T5778] ? __lock_acquire+0x7c80/0x7c80 [ 223.238853][ T5778] ? __rwlock_init+0x150/0x150 [ 223.243915][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 223.249215][ T5778] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 223.255168][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 223.260084][ T5778] ? verify_lock_unused+0x140/0x140 [ 223.265389][ T5778] ? debug_object_assert_init+0x1f1/0x2f0 [ 223.271456][ T5778] ? __timer_delete+0x6b/0x290 [ 223.276256][ T5778] lock_acquire+0x197/0x410 [ 223.280805][ T5778] ? l2cap_sock_ready_cb+0x45/0x130 [ 223.286112][ T5778] ? read_lock_is_recursive+0x20/0x20 [ 223.291675][ T5778] ? __cancel_work+0x1f8/0x2d0 [ 223.296758][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 223.302012][ T5778] ? __cancel_work+0x273/0x2d0 [ 223.306889][ T5778] lock_sock_nested+0x48/0x100 [ 223.311683][ T5778] ? l2cap_sock_ready_cb+0x45/0x130 [ 223.316920][ T5778] l2cap_sock_ready_cb+0x45/0x130 [ 223.321979][ T5778] l2cap_conn_start+0x753/0xe40 [ 223.326854][ T5778] ? l2cap_conn_update_id_addr+0x250/0x250 [ 223.332768][ T5778] ? l2cap_info_timeout+0x60/0xa0 [ 223.337810][ T5778] ? mutex_lock_nested+0x20/0x20 [ 223.342770][ T5778] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 223.348968][ T5778] ? read_lock_is_recursive+0x20/0x20 [ 223.354446][ T5778] l2cap_info_timeout+0x68/0xa0 [ 223.359333][ T5778] ? process_scheduled_works+0x957/0x15b0 [ 223.365098][ T5778] process_scheduled_works+0xa45/0x15b0 [ 223.370691][ T5778] ? assign_work+0x400/0x400 [ 223.375317][ T5778] ? assign_work+0x39e/0x400 [ 223.379924][ T5778] worker_thread+0xa55/0xfc0 [ 223.384562][ T5778] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 223.390524][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 223.395394][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 223.401325][ T5778] kthread+0x2fa/0x390 [ 223.405411][ T5778] ? pr_cont_work+0x560/0x560 [ 223.410109][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 223.414735][ T5778] ret_from_fork+0x48/0x80 [ 223.419370][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 223.423992][ T5778] ret_from_fork_asm+0x11/0x20 [ 223.428782][ T5778] [ 223.431822][ T5778] Modules linked in: [ 223.435742][ T5778] ---[ end trace 0000000000000000 ]--- [ 223.441201][ T5778] RIP: 0010:__lock_acquire+0xeb/0x7c80 [ 223.446695][ T5778] Code: 85 dc 66 00 00 83 3d 9f c0 e3 0c 00 48 89 9c 24 f0 00 00 00 0f 84 11 10 00 00 83 3d 6e d1 58 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 31 ea 75 00 48 8b [ 223.466853][ T5778] RSP: 0018:ffffc9000437f600 EFLAGS: 00010002 [ 223.472943][ T5778] RAX: 0000000000000026 RBX: 1ffff9200086fee4 RCX: 0000000000000000 [ 223.481016][ T5778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 223.489148][ T5778] RBP: ffffc9000437f848 R08: dffffc0000000000 R09: 0000000000000000 [ 223.497253][ T5778] R10: dffffc0000000000 R11: fffffbfff1c9514e R12: 0000000000000001 [ 223.505238][ T5778] R13: 0000000000000000 R14: ffff88802e099e00 R15: 0000000000000000 [ 223.513245][ T5778] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 223.522273][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.528875][ T5778] CR2: 00007fdd04d722e0 CR3: 0000000062bba000 CR4: 00000000003506f0 [ 223.537031][ T5778] Kernel panic - not syncing: Fatal exception [ 223.543412][ T5778] Kernel Offset: disabled [ 223.547741][ T5778] Rebooting in 86400 seconds..